General
-
Target
iceix_1.1.5.0.vir
-
Size
253KB
-
Sample
200719-7hknpstabj
-
MD5
a5fb8563ce0eced343a7b9a3b4a6d915
-
SHA1
04a3fdf64b80099623856bc5bef35af2fa55601c
-
SHA256
70e1d2fba60a7d20e531b09ff328fef21b82bb7e87d78a48f964d82c7dd2680f
-
SHA512
9992e37f7b0f34f9d2f792b16fe4e635e4e7ec8c7c9e2679253332acba89407082601a724010506190b510e614b30c23168d6be7707f9884b599e0d308f69bd6
Static task
static1
Behavioral task
behavioral1
Sample
iceix_1.1.5.0.vir.exe
Resource
win7v200430
Behavioral task
behavioral2
Sample
iceix_1.1.5.0.vir.exe
Resource
win10
Malware Config
Targets
-
-
Target
iceix_1.1.5.0.vir
-
Size
253KB
-
MD5
a5fb8563ce0eced343a7b9a3b4a6d915
-
SHA1
04a3fdf64b80099623856bc5bef35af2fa55601c
-
SHA256
70e1d2fba60a7d20e531b09ff328fef21b82bb7e87d78a48f964d82c7dd2680f
-
SHA512
9992e37f7b0f34f9d2f792b16fe4e635e4e7ec8c7c9e2679253332acba89407082601a724010506190b510e614b30c23168d6be7707f9884b599e0d308f69bd6
Score8/10-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Suspicious use of SetThreadContext
-